Static task
static1
Behavioral task
behavioral1
Sample
9d6cda84ae01898e079fa0371a70378b1708531c8ac7606549c71c74afb615c9.exe
Resource
win10v2004-20240226-en
General
-
Target
9d6cda84ae01898e079fa0371a70378b1708531c8ac7606549c71c74afb615c9
-
Size
1.9MB
-
MD5
0100b990c1810564d9951886bf4b43c1
-
SHA1
5bf55f7c4996f0e12a87646217bdf33c7bc0c9e5
-
SHA256
9d6cda84ae01898e079fa0371a70378b1708531c8ac7606549c71c74afb615c9
-
SHA512
aceb61082f5e2588a50381b5f690a6a3954cec3d2031a22b1fb36757191cc68c9972d33233459f75676cb6f6b5961952c6e15e59172dafb058f384d4f01dd022
-
SSDEEP
24576:PKPO2BI7nGO04/Qim+bDnoxkFWlqkuWkiIYeLx+4xg+0NcI4ybpzMlGyyM0bkTZ7:PuBIIm4xkFZY89I4gWcC0bkTSMTIJ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource 9d6cda84ae01898e079fa0371a70378b1708531c8ac7606549c71c74afb615c9
Files
-
9d6cda84ae01898e079fa0371a70378b1708531c8ac7606549c71c74afb615c9.exe windows:6 windows x86 arch:x86
2eabe9054cad5152567f0699947a2c5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
lstrcpy
Sections
Size: 186KB - Virtual size: 416KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 512B - Virtual size: 2.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
gaddcgyp Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
sdnmtfvk Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.taggant Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE